Privacy Policy
Last updated: November 18, 2025 • Effective date: November 18, 2025
Arctarim is committed to protecting your privacy. This policy explains how we collect, use, and protect information when you visit our educational portal. We comply with the EU General Data Protection Regulation (GDPR) and applicable data protection laws.
1. Information We Collect
1.1 Automatically Collected Information
When you visit our website, we automatically collect certain technical information through standard web server logs:
- IP address: Your device’s Internet Protocol address (anonymized)
- Browser information: Browser type, version, and language settings
- Device information: Device type, operating system, screen resolution
- Usage data: Pages visited, time spent on pages, navigation paths
- Referring website: The site you came from (if any)
- Date and time: When you accessed our site
This information is collected for the legitimate purpose of operating and improving our website, understanding visitor behavior, and ensuring security. We do not use this information to identify individual users.
1.2 Cookies and Similar Technologies
We use minimal, essential cookies to ensure proper website functionality:
Types of Cookies We Use:
- Essential/Functional Cookies: Required for basic website operation (e.g., remembering your cookie consent choice). These cannot be disabled.
- Analytics Cookies: Help us understand how visitors use our site (anonymized data only). You can opt out of these.
We do NOT use:
- Advertising or tracking cookies
- Third-party marketing cookies
- Social media tracking pixels
- Cross-site tracking technologies
Your Cookie Choices: You can disable cookies through your browser settings. Note that disabling essential cookies may affect website functionality.
1.3 Information You Provide
If you contact us through our contact form, we collect:
- Your name (optional)
- Email address
- Message content
- Any other information you choose to provide
Important: Do not include sensitive personal information (health data, financial information, passwords) in contact form submissions. We cannot guarantee the security of information sent via contact forms.
2. How We Use Information
We use collected information solely for the following purposes:
- Website operation: To deliver and maintain our website functionality
- Improvement: To analyze usage patterns and improve user experience
- Communication: To respond to inquiries you submit via contact form
- Security: To detect and prevent abuse, fraud, or security threats
- Legal compliance: To comply with applicable laws and regulations
We will NEVER: Sell your information, share it with third parties for marketing purposes, use it to track you across websites, or send unsolicited marketing emails.
3. Legal Basis for Processing (GDPR)
Under GDPR, we process your information based on the following legal bases:
- Legitimate interests (Article 6(1)(f)): Operating our website, analyzing usage, improving user experience
- Consent (Article 6(1)(a)): When you voluntarily submit information via contact form
- Legal obligation (Article 6(1)(c)): When required by law to retain or process information
4. Information Sharing and Disclosure
4.1 Third-Party Service Providers
We may share minimal information with trusted third-party service providers who assist in operating our website:
- Web hosting provider: To store and serve website files
- Analytics services: For anonymized website statistics (if applicable)
- Email service: To process contact form submissions
These providers are contractually obligated to protect your information and use it only for specified purposes. They cannot use your data for their own purposes.
4.2 Legal Requirements
We may disclose information if required by law, court order, or governmental authority, or to protect our legal rights, prevent fraud, or ensure user safety.
4.3 No Sale of Data
We do not sell, rent, or trade your personal information to third parties for any purpose.
5. Data Retention
We retain information only as long as necessary for the purposes described in this policy:
- Server logs: Retained for up to 90 days for security and operational purposes
- Contact form submissions: Retained for up to 2 years or until you request deletion
- Analytics data: Anonymized and retained for up to 26 months
6. Your Rights Under GDPR
If you are located in the European Union, you have the following rights regarding your personal data:
- Right to access (Article 15): Request copies of your personal data
- Right to rectification (Article 16): Request correction of inaccurate data
- Right to erasure (Article 17): Request deletion of your data (“right to be forgotten”)
- Right to restrict processing (Article 18): Request limited use of your data
- Right to data portability (Article 20): Receive your data in structured format
- Right to object (Article 21): Object to processing based on legitimate interests
- Right to withdraw consent (Article 7): Withdraw previously given consent
To exercise your rights: Contact us at the email address provided on our contact page. We will respond within 30 days as required by GDPR.
Right to lodge a complaint: You have the right to lodge a complaint with your local data protection authority if you believe we have not complied with GDPR.
7. Data Security
We implement appropriate technical and organizational measures to protect your information:
- SSL/TLS encryption for data transmission (HTTPS)
- Secure hosting infrastructure with regular security updates
- Access controls and authentication for administrative systems
- Regular security audits and monitoring
Important: While we use industry-standard security measures, no internet transmission is 100% secure. We cannot guarantee absolute security of information transmitted over the internet.
8. International Data Transfers
Our web hosting and services may be located in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure adequate protection through:
- EU-U.S. Data Privacy Framework compliance (where applicable)
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions for countries deemed to have adequate data protection
9. Children’s Privacy
Our website is not directed to children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.
10. Third-Party Websites
Our website may contain links to third-party websites (e.g., official EU sources). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.
11. Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will:
- Update the “Last updated” date at the top of this page
- Notify users through a prominent notice on our website (for significant changes)
- Obtain your consent where required by law
We encourage you to review this policy periodically.
12. Contact Us About Privacy
If you have questions, concerns, or requests regarding this privacy policy or our data practices, please contact us via our contact page.
Last reviewed: November 18, 2025
Effective date: November 18, 2025
Jurisdiction: European Union (GDPR compliant)